CVEvulnerability
CVE-2006-4855
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-09-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Affected configurations
• symantec client security 1.0
• symantec client security 1.0.0 b8.01.9378
• symantec client security 1.0.1
• symantec client security 1.0.1 build 8.01.425a
• symantec client security 1.0.1 build 8.01.429c
• symantec client security 1.0.1 build 8.01.434
• symantec client security 1.0.1 build 8.01.437
• symantec client security 1.0.1 build 8.01.446
• symantec client security 1.0.1 build 8.01.457
• symantec client security 1.0.1 build 8.01.460
• symantec client security 1.0.1 build 8.01.464
• symantec client security 1.0.1 build 8.01.471
• symantec client security 1.0.1 build 8.01.501
• symantec client security 1.0 build 8.01.9374
• symantec client security 1.1
• symantec client security 1.1.1
• symantec client security 1.1.1 build 393
• symantec client security 1.1.1 mr1 build 8.1.1.314a
• symantec client security 1.1.1 mr2 build 8.1.1.319
• symantec client security 1.1.1 mr3 build 8.1.1.323
• symantec client security 1.1.1 mr4 build 8.1.1.329
• symantec client security 1.1.1 mr5 build 8.1.1.336
• symantec client security 1.1.1 mr6 b8.1.1.266
• symantec client security 1.1 stm b8.1.0.825a
• symantec client security 2.0
• symantec client security 2.0.1 build 9.0.1.1000
• symantec client security 2.0.2 build 9.0.2.1000
• symantec client security 2.0.3 build 9.0.3.1000
• symantec client security 2.0.5 build 1100
• symantec client security 2.0 scf 7.1
• symantec client security 2.0 stm build 9.0.0.338
• symantec client security 3.0
• symantec client security 3.1
• symantec host ids
• symantec norton antivirus 2.1
• symantec norton antivirus 8.0
• symantec norton antivirus 8.0.1
• symantec norton antivirus 8.0.1.425a
• symantec norton antivirus 8.0.1.425c
• symantec norton antivirus 8.0.1.501
• symantec norton antivirus 8.0.1.9374
• symantec norton antivirus 8.0.1.9378
• symantec norton antivirus 8.1
• symantec norton antivirus 8.1.0.825a
• symantec norton antivirus 8.1.1
• symantec norton antivirus 8.1.1.319
• symantec norton antivirus 8.1.1.323
• symantec norton antivirus 8.1.1.329
• symantec norton antivirus 8.1.1.366
• symantec norton antivirus 8.1.1.377
• symantec norton antivirus 8.1.1 build8.1.1.314a
• symantec norton antivirus 8.1.1 build393
• symantec norton antivirus 8.01.434
• symantec norton antivirus 8.01.437
• symantec norton antivirus 8.01.446
• symantec norton antivirus 8.01.457
• symantec norton antivirus 8.01.460
• symantec norton antivirus 8.01.464
• symantec norton antivirus 8.01.471
• symantec norton antivirus 9.0
… and 37 more
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/21938 Vendor Advisory
- http://securityreason.com/securityalert/1591 securityreason.com
- http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html securityresponse.symantec.com
- http://securitytracker.com/id?1016889 securitytracker.com
- http://securitytracker.com/id?1016892 securitytracker.com
- http://securitytracker.com/id?1016893 securitytracker.com
- http://securitytracker.com/id?1016894 securitytracker.com
- http://securitytracker.com/id?1016895 securitytracker.com
- http://securitytracker.com/id?1016896 securitytracker.com
- http://securitytracker.com/id?1016897 securitytracker.com
- http://securitytracker.com/id?1016898 securitytracker.com
- http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php Vendor Advisory
- http://www.securityfocus.com/archive/1/446111/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20051 Exploit
- http://www.vupen.com/english/advisories/2006/3636 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28960 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/21938 Vendor Advisory
- http://securityreason.com/securityalert/1591 securityreason.com
- http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html securityresponse.symantec.com
- http://securitytracker.com/id?1016889 securitytracker.com
- http://securitytracker.com/id?1016892 securitytracker.com
- http://securitytracker.com/id?1016893 securitytracker.com
- http://securitytracker.com/id?1016894 securitytracker.com
- http://securitytracker.com/id?1016895 securitytracker.com
- http://securitytracker.com/id?1016896 securitytracker.com
- http://securitytracker.com/id?1016897 securitytracker.com
- http://securitytracker.com/id?1016898 securitytracker.com
- http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php Vendor Advisory
- http://www.securityfocus.com/archive/1/446111/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20051 Exploit
- http://www.vupen.com/english/advisories/2006/3636 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28960 exchange.xforce.ibmcloud.com